Andreas Kuhlen via Postfix-users:
> Hello,
> I am running my Postfix server with Amavis, Spamassassin, Clamav and
> have added a configuration for OpenDKIM, OpenDMARC and SPF. Sending and
> receiving mail is working satisfactorily so far. However, I noticed
> today that a DKIM signature field is inserted twice when I send a mail.
> The verification is considered valid because it says in the mail headers:
>
> It's not normal for it to be signed twice, or am I wrong?
main.cf:
> smtpd_milters = local:opendkim/opendkim.sock, local:opendmarc/opendmarc.sock,
> local:spamass/spamass.sock
> non_smtpd_milters = $smtpd_milters
You are using content_filter in master.cf. Given the above in
main.cf, you are signing messages before they to to the filter, and
again after the filter.
Solutions:
- Use the amavis to sign the messages,instead of a Milter
that plugs into Postfix. Amavis should be able to do that.
- Alternatively, turn off DKIM signing in the before-filter path.
This requires adding in master.cf
{ -o receive_override_options = no_milters }
with every smtp server that has a "content_filter" setting.
https://www.postfix.org/postconf.5.html#receive_override_options
has some tips to avoid doing things before and after a filter.
Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
